Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Edge Chromium
Total 209 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-26899 1 Microsoft 1 Edge Chromium 2023-07-07 N/A 8.8 HIGH
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-29147 1 Microsoft 1 Edge Chromium 2023-07-07 N/A 3.1 LOW
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2022-23264 1 Microsoft 1 Edge Chromium 2023-07-06 N/A 4.7 MEDIUM
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2022-23261 1 Microsoft 1 Edge Chromium 2023-06-29 5.0 MEDIUM 5.3 MEDIUM
Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2022-24523 1 Microsoft 1 Edge Chromium 2023-06-29 4.3 MEDIUM 4.3 MEDIUM
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2022-33649 1 Microsoft 1 Edge Chromium 2023-05-31 N/A 9.6 CRITICAL
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2022-35796 1 Microsoft 1 Edge Chromium 2023-05-31 N/A 7.5 HIGH
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-33636 1 Microsoft 1 Edge Chromium 2023-05-31 N/A 8.3 HIGH
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-38012 1 Microsoft 1 Edge Chromium 2023-04-11 N/A 7.7 HIGH
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2021-21133 2 Google, Microsoft 2 Chrome, Edge Chromium 2022-07-12 4.3 MEDIUM 6.5 MEDIUM
Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.
CVE-2021-21131 2 Google, Microsoft 2 Chrome, Edge Chromium 2022-07-12 4.3 MEDIUM 6.5 MEDIUM
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21129 2 Google, Microsoft 2 Chrome, Edge Chromium 2022-07-12 4.3 MEDIUM 6.5 MEDIUM
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21130 2 Google, Microsoft 2 Chrome, Edge Chromium 2022-07-12 4.3 MEDIUM 6.5 MEDIUM
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21125 2 Google, Microsoft 2 Chrome, Edge Chromium 2022-07-12 5.8 MEDIUM 8.1 HIGH
Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21127 2 Google, Microsoft 2 Chrome, Edge Chromium 2022-07-12 6.8 MEDIUM 8.8 HIGH
Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.
CVE-2021-21137 2 Google, Microsoft 2 Chrome, Edge Chromium 2022-06-28 4.3 MEDIUM 6.5 MEDIUM
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
CVE-2021-21118 2 Google, Microsoft 2 Chrome, Edge Chromium 2021-03-15 6.8 MEDIUM 8.8 HIGH
Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVE-2021-21139 2 Google, Microsoft 2 Chrome, Edge Chromium 2021-03-15 4.3 MEDIUM 6.5 MEDIUM
Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2021-21136 2 Google, Microsoft 3 Android, Chrome, Edge Chromium 2021-03-08 4.3 MEDIUM 6.5 MEDIUM
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-21135 2 Google, Microsoft 2 Chrome, Edge Chromium 2021-03-08 4.3 MEDIUM 6.5 MEDIUM
Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.